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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1 . (Currently amended) A method comprising providing a secret cryptographic key and a 
public cryptographic key applicable in a network of connected computer nodes using a signature 
scheme, the method being executable by a first computer node and the step of providing 
comprising the steps of: 

generating the secret cryptographic key by: 
selecting two random factor values, 

multiplying the two selected random factor values by each other to obtain a 
modulus value, and 

selecting a secret base value as a function of the modulus value, wherein the 
secret base value forms part of the secret cryptographic key; 
generating the public cryptographic key by: 

selecting a number of exponent values, and 

deriving a public base value from the exponent values and the secret base value, 
wherein the public base value and the modulus value form part of the public cryptographic key; 
deleting the two random factor values; and 
providing the public cryptographic key within the network; 

publishing a parameter as part of the public cryptographic key, wherein said parameter 
controls a time-period during which a user can take to note that the secret cryptographic key was 
compromised; 

using the public cryptographic key and at least one of the selected exponent values is 
usable for verifying a signature value on a message; 

sending the message to a second computer node within the network for verification; and 
aborting signing of the message when i f-the public cryptographic key has been revoked^ 
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aborting signing of tho mossago . 

2. (Previously presented) The method according to claim 1, further comprising providing a 
description of the exponent values within the network. 

3. (Previously presented) The method according to claim I, further comprising defining an order 
of the selected exponent values for enabling to communicate the validity of the signature value in 
the event of a detected intrusion. 

4. (Currently amended) A method comprising providing a signature value on a message in a 
network of connected computer nodes, the method being executable by a first computer node and 
the step of providing comprising the steps of: 

selecting a first signature element from a plurality of signature elements included in said 
signature; 

selecting a signature exponent value from a number of exponent values, said signature 
comprised of a plurality of signature exponent values; and 

deriving a second signature element from a provided secret cryptographic key, the 
message, and the number of exponent values such that the first signature element, the second 
signature element, and the signature exponent value satisfy a known relationship with the 
message and a provided public cryptographic key, wherein the signature value comprises the first 
signature element, the second signature element, and a signature reference to the signature 
exponent value, and 

sending the message to a second computer node within the network for verification; and 
aborting signing of the message when i f the public cryptographic key has been revoked^ 
aborting signing of the message . 

5. (Previously presented) The method according to claim 4, wherein the step of deriving a second 
signature element further comprises deriving a signature base value using a provided public 
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cryptographic key, the provided secret cryptographic key, and the exponent values. 

6. (Previously presented) The method according to claim 4, further comprising deriving a new 
secret cryptographic key from the provided secret cryptographic key and the selected signature 
exponent value. 

7. (Currently amended) A method comprising verifying a signature value on a message in a 
network of connected computer nodes, the method being executable by a second computer node 
and the step of verifying comprising the steps of: 

receiving the signature value from a first computer node; 

deriving a signature exponent value from the signature value; and 

verifying whether the signature exponent value and part of the signature value 
satisfy a known relationship with the message and a provided public cryptographic key, 
otherwise refusing the signature value, 

wherein the signature value was generated from a first signature element, a 
number of exponent values, a provided secret cryptographic key, and the message; and 

aborting signing of the message when i f the public cryptographic key has been 

8. (Canceled) 

9. (Currently amended) The method according to claim [[1]] 7, further comprising applying each 
of the exponent values to at most one signature value. 

10. (Previously presented) A computer program element comprising program code means for 
performing the method of claim 1 when said program is run on a computer. 

1 1 . (Previously presented) A computer program product stored on a computer usable medium, 
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comprising computer readable program for causing a computer to perform the method according 
to claim 1 . 

12. (Currently amended) A network device comprising: 

a computer program product for causing a computer to perform a method 
comprising steps of: 

generating the secret cryptographic key by: 
selecting two random factor values, 

multiplying the two selected random factor values by each other to obtain 
a modulus value, and 

selecting a secret base value as a function of the modulus value, wherein 
the secret base value forms part of the secret cryptographic key; 
generating the public cryptographic key by: 

selecting a number of exponent values, and 

deriving a public base value from the exponent values and the secret base 
value, wherein the public base value and the modulus value form part of the public 
cryptographic key; 

deleting the two random factor values; and 

providing the public cryptographic key within the network; 

publishing a parameter as part of the public cryptographic key, wherein 
said parameter controls a time-period during which a user can take to note that the secret 
cryptographic key was compromised; 

using the public cryptographic key and at least one of the selected exponent 
values is usable for verifying a signature value on a message; 

sending the message to a second computer node within the network for 
verification; and 

aborting signing of the message when if the public cryptographic key has been 
revoked , aborting signing of the message ; and 
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a processor for executing the method; the processor having access to exchanged messages 
in the network. 

13. (Previously presented) The method according to claim 4, further comprising applying each of 
the exponent values to at most one signature value. 

14. (Previously presented) The method according to claim 7, further comprising applying each of 
the exponent values to at most one signature value. 

15. (Canceled) 

16. (Previously presented) A computer program clement comprising program code for 
performing the method of claim 4, when said program is run on a computer. 

17. (Previously presented) A computer program product stored on a computer usable medium, 
comprising a computer readable program for causing a computer to perform a method according 
to claim 4. 

18. (Previously presented) A computer program element comprising program code for 
performing the method of claim 7, when said program is run on a computer. 

19. (Previously presented) A computer program product stored on a computer usable medium, 
comprising computer readable program for causing a computer to perform a method according to 
claim 7. 

20. (Previously presented) A computer program element comprising program code for 
performing the method of claim 8, when said program is run on a computer. 
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21. (Canceled) 



22. (Previously presented) A computer program product comprising a computer usable storage 
medium having computer readable program code means embodied therein for causing functions 
of a network device, the computer readable program code in said computer program product 
comprising computer readable program code for causing a computer to effect the functions of 
claim 12. 



